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CLAIMS : 

What is claimed is: 

An encryption key management system comprising: 
a master key; and 

a portable processor, wherein the portable 
processor uses the master key for generating an 
encryption key. 



2. The encryption key management system recited in claim 
1 further (fo^prising: 

.able key range variable, wherein the 
portttroitfe^&rocessor further uses the variable key range 
vanat>l€\ for generating the encryption key. 

3 \ The encryption key management system recited in claim 
2, wherein the variable key range variable is output with 
the encryption key. 

4. The Encryption key management system recited in claim 
2, wherein £she variable key range variable comprises at 
least one of \ card number, a card group number and a 
reference number^ representing a number of keys. 




5. The encrypt ionNcey management system recited in claim 
2, wherein the portable processor further comprises: 

a hashing function for generating the encryption 

key. 
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6. The Nencryption key management system recited in claim 
1, whereirrvthe portable processor is a smart card. 

7. The encryption key management system recited in claim 
6, wherein the\smart card is accessed through verification 
of a personal iaentif ication number. 

8. The encryption key management system recited in claim 
4, wherein the portable processor further comprises: 

an incrementor for increasing the value of the 
reference number Vn response to the encryption key 
being generated. \ 

9. The encryption key management system recited in claim 
1, wherein the portable processor is a first portable 
processor and the system further comprises: 

a second portable processor, wherein the portable 
processor uses the master Vey for generating a 
decryption key. \ 

10. The encryption key management Nsystem recited in claim 

9, wherein the second portable processor further uses the 
variable key range variable for generating the encryption 
key. \ 

11. The encryption key management systemXrecited in claim 

10, wherein the variable key range variabilis input to the 
second portable processor. \ 



• 
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The\ encryption key management system recited in claim 
17, where\n trt^Jte^Sriable key range variable is output with 



the decryption » key . 




on key management system recited in claim 
variable key range variable comprises at 
\:ard number, a card group number, and a 
representing a number of keys. 



2 0\ The encryption key management system recited in claim 
17, \ wherein the portable processor further comprises: 

a hashing function for generating the decryption 

:ey. 

21. The encryption key management system recited in claim 
16, wherein the portable processor is a smart card. 

22. An encryption key management method comprising: 
iceiving a master key; 

generating an encryption key using the master 
key, wherein the encryption key is generated by a 
portable processor; and 

outputting the encryption key. 



23. The method rfecited in claim 22 prior to generating an 
encryption key the\method further comprises: 

creating ^ varialDleicey range variable, wherein 
the portable pro\resscrA»s^s the variable key range 
variable for geneisatingVhe encryption key. 
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1 24. The method recited in claim 23 further comprises: 

2 out^putting the variable key range variable. 

1 25. The method recited in claim 23, wherein the variable 

2 key ranqe variable comprises at least one of a card number, 

3 a card gneltpi number , and a reference number representing a 

4 number of ^peys . 

1 26\ The method recited in claim 23, wherein generating the 

2 encryption key further comprises: 

3 \ hashing the master key. 

1 27. The niethod recited in claim 23, wherein the portable 

2 processor isi a smart card. 

1 28. The method\recited in claim 27 further comprises: 

2 verifying a personal identification number; and 

3 accessing^ functionality of the smart card. 

1 29. The method recites! in claim 22, wherein the portable 

2 processor is a first portable processor and the method 

3 further comprises: \ 

4 generating a decryption key using the master key, 

5 wherein the decryption key is generated by a second 

6 portable processor; and \ 

7 outputting the decryption key. 

1 30. The method recited in claim 29 \ prior to generating 

2 the encryption key further comprises :\ 
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3 receiving a variable key range variable, wherein 

4 the second portable processor uses the variable key 

5 range variable for generating the encryption key. 

1 31. The method recited in claim 23, wherein the second 

2 portable processor is\a smart card. 

1 32. The method recited Vn claim 22, wherein a smart card 

2 is accessed through verification of a personal 

3 identification number. \ 

1 33. An encryption key management method comprising: 

2 receiving a master l^ey; and 

3 generating a decryptron key using the master key, 

4 wherein the decryption keyVs generated by a portable 

5 processor; and \ 

6 outputting the decryption key. 

1 34. The method reci\ed in claim 33 prior to generating the 

2 decryption key the method further comprises: 

3 creating a variable kayv range variable, wherein 

4 the portable processor us§^^hevariable key range 

5 variable for generatiS^g the diec^yption key. 

1^ /35. TheViethod recited in claim 34 further comprises: 
2/ Cmtputting the variable key range variable. 

1 36. The n^tf^<^cited in claim 34, wherein the variable 

2 key range vcNrrafifle comprises at least one of a card number, 
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3 a card groui niptoar , and a reference number representing a 

4 number of ke^si 

37. \ The method recited in claim 34, wherein generating the 

2 decryption key further comprises: 

3 \ hashing the master key. 

1 38. The mtethod recited in claim 34, wherein the portable 

2 processor is\a smart card. 
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